> The nice thing is that using the private key requires physical touch.
Yeah (not talking about crypto): yubikeys (or similar) are really sweet for that. I've use them for ssh / pushing / fetching from Git etc. I use them for 2FA to various services etc.
There are also similar devices where you enter a PIN and the PIN to register to a service the first time and then the PIN to auth are different. So you can't be tricked by mistake to register to a new service when you just want to auth (you could still be tricked to register to a service which ain't the one you think while registering, but never while auth'ing).
And yup I use that with AI all the time: my agents go inside a container or inside a VM (or both), and the damage it can do is very limited.
It's also possible to do passthrough of devices (GPU, USB, ...) to VMs: good stuff.
Yeah (not talking about crypto): yubikeys (or similar) are really sweet for that. I've use them for ssh / pushing / fetching from Git etc. I use them for 2FA to various services etc.
There are also similar devices where you enter a PIN and the PIN to register to a service the first time and then the PIN to auth are different. So you can't be tricked by mistake to register to a new service when you just want to auth (you could still be tricked to register to a service which ain't the one you think while registering, but never while auth'ing).
And yup I use that with AI all the time: my agents go inside a container or inside a VM (or both), and the damage it can do is very limited.
It's also possible to do passthrough of devices (GPU, USB, ...) to VMs: good stuff.